PoC for Harmony Mobile

[lincolnwebber]

Hi Guys,

Can you point me to any resources that I can use to test a new Harmony Mobile deployment? We have a couple test devices added to the dashboard and we want to see the solution in action before moving on to a pilot. Are there any sites/apps that I can use to simulate attacks for the customer to get a feel of what to expect when the solution catches and prevents these mobile attacks?

[MikeB]

You can always use http://www.cpcheckme.com/checkme/

you should also consider this sk153072

[lincolnwebber]

Thanks Mike. I did send it to the customer. Could you tell me why a device having the mobile protect app return 'vulnerable' for all the tests if the user chooses to do a 'Network' test from the checkme site? What's the difference between how the test operates when 'Network' is chosen as opposed to 'Mobile'?

[Yuval_Sered]

Turn on ONP in the policy and use this demo tool to trigger some attacks:

- block phishing sites taken from openphish

- see how you block zero-phishing using the fake salesforce login page

- block side-loading 

- URLF

and more...

http://main.sbm-demo.xyz/

in this site you also have a step by step guide 

good luck

Yuval 

[lincolnwebber]

Thanks Yuval,

This is very useful.